$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d64ba36c-235f-3fbe-a00b-488dbe8efc46.roa File: d64ba36c-235f-3fbe-a00b-488dbe8efc46.roa (raw, json) Hash identifier: pEqo5MkRSyMSvZaexkfI/hTBA4xuxzxOvWX/i73Ml18= Subject key identifier: B1:3B:41:EA:70:C1:44:05:51:FE:2F:DA:64:CB:8B:C9:74:F7:69:61 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814614FF315643595CB9CF90 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d64ba36c-235f-3fbe-a00b-488dbe8efc46.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 65.22.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:14:ff:31:56:43:59:5c:b9:cf:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=715604de-6ffb-4ffe-b79e-17f6d23a0dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:ba:23:58:eb:d5:25:61:b4:30:9c:ed:5a: e2:09:29:3f:44:78:88:4a:9b:9e:26:3c:f5:c0:38: c0:bc:d2:17:4b:fc:2a:1a:a0:4b:fa:c0:ce:3f:09: 2d:27:36:9c:be:5d:56:16:c9:fd:f9:ba:c7:a9:5c: c5:ba:81:74:54:c7:f4:23:08:79:e2:b2:9e:76:12: 57:30:55:88:5e:89:05:b6:4e:34:f6:0e:2e:3c:2a: 9f:e2:f6:e5:c1:aa:e9:9a:d1:96:04:9f:69:92:66: 7f:31:ca:fb:1b:35:09:81:05:aa:4c:41:51:22:5f: 43:f0:01:67:72:2f:07:2d:3d:7f:cc:39:78:ec:45: 7a:0f:c7:55:70:19:f6:5c:05:1e:6e:9e:20:ad:51: 44:03:85:64:eb:99:7f:2d:81:67:16:c9:f8:ba:a3: 4c:17:d6:9a:ff:46:f7:25:00:14:04:e9:68:91:a0: aa:be:d6:10:07:ad:7e:60:7f:c4:05:01:c1:79:c3: 18:7b:04:d8:37:e5:b4:c4:75:32:3c:3c:e1:d8:fe: 6f:6e:bb:df:7e:40:60:5d:f3:5b:55:b5:29:e1:bc: e2:7c:bb:56:81:e4:61:c0:5f:ea:4a:bd:ad:6c:6a: ad:1f:91:fa:c8:fe:63:00:58:ef:ad:54:09:2f:65: 23:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3B:41:EA:70:C1:44:05:51:FE:2F:DA:64:CB:8B:C9:74:F7:69:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d64ba36c-235f-3fbe-a00b-488dbe8efc46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:38:a9:66:bd:f1:c2:98:ad:9a:a5:d7:f3:da:1d:96:23:e3: e6:08:76:64:90:63:c1:f3:c6:e2:80:1b:08:af:ee:3d:d2:56: 61:81:b1:de:4f:d2:d8:e0:e6:e6:5b:6f:61:d3:84:bb:cb:80: 12:ab:05:95:21:e9:31:c8:5b:65:86:54:c1:7c:ce:46:b2:6c: 24:c4:88:bb:d9:3e:e7:8a:92:44:9a:24:6d:14:ef:4f:48:d7: b1:77:57:fb:0f:85:32:89:fe:44:a4:40:e5:26:37:0a:9d:be: 6f:6f:c2:a5:fb:1f:12:07:9e:dd:ed:a0:0d:a3:1e:c5:c4:91: 62:e5:99:8a:ca:c1:e4:ee:12:2f:a5:43:31:a4:f1:ef:5a:a8: b4:a8:71:f0:22:f4:92:fc:7d:1e:b5:5e:92:fd:c1:0b:12:78: 2e:9d:87:c6:da:82:49:e7:19:d5:cb:51:a2:a0:fc:1e:53:d2: 9b:49:fa:17:54:e8:ed:63:d9:cc:6b:78:f8:fa:f3:19:97:28: cf:46:4a:e1:e4:ee:6a:be:fd:48:51:28:8d:3e:a4:35:ad:66: c4:35:15:72:b4:0c:92:3d:b2:9c:31:a0:a6:cc:04:bf:c0:0e: fa:3f:b4:03:28:83:cb:57:96:88:76:8a:f8:42:37:e6:96:7f: a6:5a:dd:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhT/MVZDWVy5z5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NzE1NjA0ZGUtNmZmYi00ZmZlLWI3OWUtMTdmNmQyM2EwZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AK6I1jr1SVhtDCc7VriCSk/RHiISpueJjz1 wDjAvNIXS/wqGqBL+sDOPwktJzacvl1WFsn9+brHqVzFuoF0VMf0Iwh54rKedhJX MFWIXokFtk409g4uPCqf4vblwarpmtGWBJ9pkmZ/Mcr7GzUJgQWqTEFRIl9D8AFn ci8HLT1/zDl47EV6D8dVcBn2XAUebp4grVFEA4Vk65l/LYFnFsn4uqNMF9aa/0b3 JQAUBOlokaCqvtYQB61+YH/EBQHBecMYewTYN+W0xHUyPDzh2P5vbrvffkBgXfNb VbUp4bzifLtWgeRhwF/qSr2tbGqtH5H6yP5jAFjvrVQJL2UjawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE7QepwwUQFUf4v2mTLi8l092lhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDY0YmEzNmMtMjM1Zi0z ZmJlLWEwMGItNDg4ZGJlOGVmYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMI4qWa98cKYrZql1/PaHZYj4+YIdmSQY8HzxuKAGwiv7j3SVmGBsd5P 0tjg5uZbb2HThLvLgBKrBZUh6THIW2WGVMF8zkaybCTEiLvZPueKkkSaJG0U709I 17F3V/sPhTKJ/kSkQOUmNwqdvm9vwqX7HxIHnt3toA2jHsXEkWLlmYrKweTuEi+l QzGk8e9aqLSocfAi9JL8fR61XpL9wQsSeC6dh8bagknnGdXLUaKg/B5T0ptJ+hdU 6O1j2cxrePj68xmXKM9GSuHk7mq+/UhRKI0+pDWtZsQ1FXK0DJI9spwxoKbMBL/A Dvo/tAMog8tXloh2ivhCN+aWf6Za3Xg= -----END CERTIFICATE-----Generated at Thu Aug 7 01:05:11 2025 by rpki-client